Actions
Bug #22358
closed
Improve OpenID association handling
Start date:
2010-03-31
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
4.3
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
There are two issues with OpenID association handling.
Firsts, if session is expired, it is not removed from the storage by the Consumer object. Thus authentication failures due to expired association may happen several times before the association is invalidated by the server.
Secondly, due to MySQL issues with character sets blogs can be written incorrectly (some of character_set_* variables affect blobs!). Therefore it is safer to encode association data to a binary safe string (such as base64) in the database.
The attached patch contains both fixes.
(issue imported from #M13977)
Files
No data to display
Actions